question

Kevin M avatar image
Kevin M asked

Acceptable SSL cert - does Comodo PositiveSSL meet req for certification?

I've read through the list that the AppKit documents link to here: https://wiki.mozilla.org/CA:IncludedCAs, but while there are a number of "Comodo" SSL certs, I'm not sure whether or not this SSL certificate is one of them: https://www.namecheap.com/security/ssl-certificates/comodo/positivessl.aspx Frankly I'm unsure of how much of this text with some of these is just marketing speak, so I'm unsure whether or not this cert from namecheap would be acceptable. Thanks for your time/help!
alexa skills kitsubmission testing certification
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

James Chivers avatar image
James Chivers answered
Hi Kevin, It looks like you’re good with this certificate - I'm 99% sure, anyway :) This is how I checked for you - from: https://www.namecheap.com/support/knowledgebase/article.aspx/9393/69/where-do-i-find-ssl-ca-bundle ...I downloaded the first CA Bundle in the list under Comodo, i.e.: PositiveSSL SHA-1 (also applicable for PositiveSSL Wildcard and PositiveSSL Multi-Domain) Unzipped the bundle, checked that it looked ok and confirmed the Serial Number: $ openssl x509 -in COMODO_PositiveSSL_SHA-1_bundle.crt -text -noout|grep "Serial Number" -A1 Serial Number: 07:6f:12:46:81:45:9c:28:d5:48:d6:97:c4:0e:00:1b Then I opened the CRT file with a cert installer/viewer tool (gcr-viewer, on Linux) to confirm what CA Root it would use, thus: AddTrust External CA Root Identity: AddTrust External CA Root Verified by: AddTrust External CA Root Expires: 05/30/2020 Certificate Fingerprints SHA1: 02 FA F3 E2 91 43 54 68 60 78 57 69 4D F5 E4 5B 68 85 18 68 MD5: 1D 35 54 04 85 78 B0 3F 42 42 4D BF 20 73 0A 3F ...and this SHA1 fingerprint matches a cert in https://wiki.mozilla.org/CA:IncludedCAs Good luck! Cheers, James
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Kevin M avatar image
Kevin M answered
James, seriously, thank you so much! I really really appreciate it. I am going to try to understand more about what you actually did, because unfortunately I'm not familiar enough with the inner workings of the https process (despite having read various wikipedia articles, etc, in the past). Anyway, for now, again, thank you!
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

James Chivers avatar image
James Chivers answered
Hey Kevin, no worries - anytime :) Let me know if you need a hand when you come to generating the CSR / installing the cert, etc.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.